Skip to content
OpenAdvisories

Vendor

sunshinephotocart

19 known vulnerabilities.

Products

Sunshine Photo Cart 15 Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers 4
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-57703

    WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.

    sunshinephotocart Sunshine Photo Cart
  • Medium 5.3
    CVE-2026-39564

    WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Retrieve Embedded Sensitive Data.This issue affects Sunshine Photo Cart: from n/a through < 3.6.2.

    sunshinephotocart Sunshine Photo Cart
  • Medium 6.5
    CVE-2025-67973

    WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.6.2.

    sunshinephotocart Sunshine Photo Cart
  • Medium 5.3
    CVE-2026-24994

    WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.7.2.

    sunshinephotocart Sunshine Photo Cart
  • Medium 4.3
    CVE-2025-68535

    WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.7.1.

    sunshinephotocart Sunshine Photo Cart
  • Medium 5.3
    CVE-2025-62892

    WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.3.

    sunshinephotocart Sunshine Photo Cart
  • Medium 4.3
    CVE-2024-49697

    WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.9.

    sunshinephotocart Sunshine Photo Cart
  • Medium 5.3
    CVE-2024-44038

    WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.9.

    sunshinephotocart Sunshine Photo Cart
  • Medium 4.3
    CVE-2024-43136

    WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.1.

    sunshinephotocart Sunshine Photo Cart
  • Medium 4.7
    CVE-2024-50463

    WordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.9.

    sunshinephotocart Sunshine Photo Cart
  • Medium 5.4
    CVE-2024-30221

    WordPress Sunshine Photo Cart plugin <= 3.1.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.1.1.

    sunshinephotocart Sunshine Photo Cart
  • Medium 5.3
    CVE-2024-1294

    Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice

    The Sunshine Photo Cart: Free Client Galleries for Photographers plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.24 via the 'invoice'. This makes it possible for unauthenticated attackers to extra…

    sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers Web / CMS
  • Medium 4.3
    CVE-2021-4415

    Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypass

    The Sunshine Photo Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.28 This is due to missing or incorrect nonce validation on the sunshine_products_quicksave_post() function. This makes it possible f…

    sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers Web / CMS